RETIRED: Microsoft IIS Malformed Local Filename Security Bypass Vulnerability

RETIRED: Microsoft IIS Malformed Local Filename Security Bypass Vulnerability

References:

Exploiting Microsoft IIS with Metasploit (Metasploit)
Microsoft IIS 0Day Vulnerability in Parsing Files (semi-colon bug) (Soroush Dalili)
Microsoft IIS Homepage (Microsoft)
New Reports of a Vulnerability in IIS (Microsoft)
Public disclosure of IIS security issue with semi-colons in URL (naziml)
Results of Investigation into Holiday IIS Claim (Microsoft)
Code to mitigate IIS semicolon zero-day (ds.adv.pub@gmail.com)
Microsoft IIS 0Day Vulnerability in Parsing Files (semi-colon bug) (bugreport@itguard.info)
Tests about semicolon zero-day (BID 37460) (Crash - DcLabs )

Privacy Statement
Copyright 2010, SecurityFocus